This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13882E98FDBC11F0960EFDA7DAE4EC9C.roa
File:                     13882E98FDBC11F0960EFDA7DAE4EC9C.roa (raw, json)
Hash identifier:          bfx9qeYcm4MHUti9qLgexJ+eSJiHDIpgGZtzb9elnYU=
Subject key identifier:   45:8B:2C:81:EB:DA:35:4C:47:39:FA:47:1A:4F:4A:41:AD:22:F2:BD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019AEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13882E98FDBC11F0960EFDA7DAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 09:15:27 +0000
ROA not before:           Fri 30 Jan 2026 09:14:22 +0000
ROA not after:            Fri 13 Feb 2026 09:14:22 +0000
asID:                     152705
IP address blocks:        156.239.224.0/20 maxlen: 24
                          156.239.224.0/21 maxlen: 24
                          156.239.224.0/22 maxlen: 24
                          156.239.224.0/23 maxlen: 24
                          156.239.224.0/24 maxlen: 24
                          156.239.225.0/24 maxlen: 24
                          156.239.226.0/23 maxlen: 24
                          156.239.226.0/24 maxlen: 24
                          156.239.254.0/24 maxlen: 24
                          156.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105194 (0x19aea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 30 09:14:22 2026 GMT
            Not After : Feb 13 09:14:22 2026 GMT
        Subject: CN=697c76af-c69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:62:2a:40:f6:ea:0e:aa:f0:c0:2d:a5:72:
                    42:bc:e4:b2:18:38:52:80:b6:5d:95:df:c8:ba:03:
                    52:da:c9:c5:6a:f1:5d:48:97:6e:a5:a6:d4:56:a9:
                    6d:95:20:a1:cc:81:29:53:90:0e:c5:0d:49:d4:04:
                    c0:ec:87:30:8b:49:46:68:8e:1f:9f:cc:2d:bf:c2:
                    6f:aa:d6:4f:97:11:1f:b0:40:e7:6b:1c:c9:62:8f:
                    e2:0b:e9:a9:f4:c6:0f:e8:ff:a3:b8:c7:e9:2c:be:
                    f9:ba:b3:10:62:a2:3c:8e:b2:3c:e3:8e:9a:b3:e1:
                    bb:f0:97:f0:a1:8f:c2:56:bf:81:94:ed:2a:21:13:
                    95:74:26:f2:01:97:2b:d4:40:27:9a:f3:b8:36:57:
                    e3:ff:f3:56:7e:9d:66:b7:79:54:13:87:df:f0:67:
                    85:2e:dc:63:4c:98:fc:de:7d:a9:91:07:db:f7:26:
                    b1:ed:1f:6b:c3:e9:94:45:05:24:a0:a8:7d:ea:d9:
                    4f:9a:93:b6:3e:19:e1:26:45:5a:37:ac:7c:39:5b:
                    0a:78:4a:32:8d:16:8f:92:79:85:67:0a:8b:c5:e0:
                    64:a0:5a:9e:44:fc:91:a7:25:a7:95:78:8e:06:82:
                    b5:23:c6:a3:2e:04:9d:5d:b9:d9:bd:5e:5c:fc:b5:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8B:2C:81:EB:DA:35:4C:47:39:FA:47:1A:4F:4A:41:AD:22:F2:BD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13882E98FDBC11F0960EFDA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.224.0/20
                  156.239.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:78:3f:8c:2f:7d:70:a4:5a:de:04:83:18:76:27:49:00:
         3d:94:18:cc:b9:05:36:28:4a:f0:73:72:21:f3:7b:41:53:bb:
         c1:11:17:6d:38:4e:02:2c:7e:0a:1f:90:60:e7:b9:ed:02:1c:
         5c:8f:34:5c:d7:5b:f4:42:30:3e:a5:7e:c4:d9:52:33:f6:6d:
         ff:5b:8a:62:ec:7a:94:1c:b7:b2:ae:44:ab:1f:2e:f9:f4:a3:
         b9:11:e4:71:b0:86:88:d1:a2:39:20:77:c7:5f:91:54:eb:31:
         d6:32:a6:f2:2f:e5:5a:f6:d9:c0:28:56:57:66:08:db:1d:bb:
         a2:26:d5:f2:b0:2f:bf:43:90:77:44:88:36:1b:6b:83:44:5c:
         1e:6e:0f:63:05:14:d4:a5:3e:bf:61:36:72:6e:a0:77:94:f7:
         93:d6:d5:b3:24:c7:5c:0a:1c:76:70:21:e1:6b:06:ef:70:f4:
         13:95:1f:fd:a2:ab:2b:d5:f9:b3:96:f3:ba:ad:9b:d9:3d:15:
         0c:e0:e3:cd:83:c3:79:f9:21:30:f9:49:3e:1a:36:63:8f:ae:
         88:cd:6f:db:dc:e7:03:c7:77:d7:bc:61:7f:f0:9e:6c:09:6d:
         f6:54:6e:5b:62:98:c1:de:da:59:74:ac:74:d9:6d:ff:18:42:
         53:00:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 20:20:54 2026 by rpki-client